PT-2011-4790

Name of the Vulnerable Software and Affected Versions LightNEasy version 3.2.4 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via specific parameters in a sendcomment action for the news page. The vulnerable parameters are commentemail,...